AhnLab, Inc. — 00:1B:E2 (MA-L)

AhnLab holds a single IEEE MA-L block, 00:1B:E2, registered to "AhnLab,Inc." at a legacy Seoul address (6th Fl, CCMM Bldg, 12 Yeouido-dong). A bare single-OUI registration is often a thin shell with nothing behind it, but AhnLab is not that case: it is a publicly traded South Korean cybersecurity vendor (KOSDAQ: 053800), founded 15 March 1995 by Ahn Cheol-soo, with three decades of continuous operation and a current HQ in Pangyo, Seongnam — a clear mismatch with the registry's outdated Yeouido address that confirms the block predates a later office move rather than indicating a defunct entity. Beyond its well-known V3 antivirus software line, AhnLab ships physical network-security appliances — the TrusGuard firewall/UTM family (2005-present), TrusGuard DPX (DDoS mitigation), TrusGuard IPX (rated in Gartner's IPS Magic Quadrant), and a 2025-generation AhnLab XTG next-gen firewall — which gives its single OUI a plausible, findable hardware rationale rather than an orphaned registration with no product context.

Registry / assignment

MA-L, 00:1B:E2 → "AhnLab,Inc." [Confirmed] — the IEEE MA-L registry

Registered address

6th Fl, CCMM Bldg, 12 Yeouido-dong, Seoul, KR 150869 — legacy registry address; current HQ is 220 Pangyoyeok-ro, Bundang-gu, Seongnam (Pangyo) [Confirmed registry address / Likely current-HQ claim] — the IEEE MA-L registry; https://www.ahnlab.com/en/30th/history

Total prefix count

1 (single MA-L assignment; no MA-M/MA-S records found for AhnLab in cached registries) [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry

Registration date

Unknown — IEEE's the IEEE MA-L registry publishes no assignment/registration date for this or any block; none is fabricated or attributed to IEEE [Confirmed absence] — the IEEE MA-L registry

Company status

Active; founded 15 March 1995 by Ahn Cheol-soo; publicly traded on KOSDAQ (ticker 053800) since September 2001; 30th-anniversary activity and a new product (AhnLab XTG) in 2025 [Likely — single web angle, corroborated by 3 independent citations] — https://www.ahnlab.com/en/30th/history, https://en.everybodywiki.com/AhnLab,_Inc., https://stockanalysis.com/quote/kosdaq/053800/company/

Device / product context

TrusGuard firewall/UTM (2005), TrusGuard DPX (DDoS, 2010), TrusGuard IPX (Gartner IPS MQ, 2017), TrusGuard (Gartner Enterprise Firewall MQ 2014-2018), AhnLab XTG next-gen firewall (2025, ZTNA/SD-WAN), AhnLab Network PLUS, AhnLab Data Diode (OT/IT gateway hardware) [Likely — single web angle] — https://www.ahnlab.com/en/30th/history, https://www.ahnlab.com/en/contents/content-center/35532, https://www.ahnlab.com/en/product/network-plus

Direct MAC-to-device sighting

no third-party sighting found linking 00:1B:E2 specifically to a named AhnLab device model; device-type match is circumstantial support only [Unknown] — none

Security context

AhnLab V3 Endpoint Security was named among products (with Windows Defender, CrowdStrike Falcon, HitmanPro) that Lazarus Group's BYOVD technique (CVE-2024-21338) targeted for evasion; no CVEs found against AhnLab's own hardware appliances in this pass

[Confirmed] — https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-gain-kernel-privileges/

Company substance verdict

identifiable, publicly traded company with 30-year history, named appliance product lines, and Gartner MQ recognition — not a bare single-OUI shell, despite holding only one IEEE assignment [Confirmed] — https://www.ahnlab.com/en/30th/history